tdd
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use various CLI tools including 'node --test' for running suites, 'git log' for tracking constant changes, and 'tmux' for simulating process signals (SIGINT, SIGHUP). These are standard practices for developers and do not represent malicious behavior.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-supplied features and bug descriptions to generate code and tests, creating an inherent ingestion surface for indirect prompt injection. • Ingestion points: User requests for new features, bug fixes, or refactoring as described in SKILL.md. • Boundary markers: The instructions do not specify explicit delimiters or 'ignore' instructions for user-provided data. • Capability inventory: The skill utilizes file system writing, local command execution (test runners, git), and PTY terminal interactions. • Sanitization: No specific sanitization or filtering logic is provided for the interpolated user content.
Audit Metadata